Loading threat actor…
Chubby Scorpius is the threat actor identified in the provided content as distributing CL0P ransomware. The content states that it was the third most active ransomware group in 2023, but that its activity fell dramatically in 2024; as of June 2024, it accounted for less than 0.75% of total posts in the referenced leak site data. Based on the provided material, this actor is part of the ransomware ecosystem. No additional high-confidence details on targeting, tactics, techniques, geography, sub-groups, or attribution are directly provided beyond its association with CL0P ransomware. Known alias in the provided content: CL0P.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
13 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
1 malware family attributed to this actor across reporting.
1 CVE this actor has used in observed campaigns. 1 of them exploited in the wild.
5 indicators attributed to this actor: domains, IPs, hashes, and other artifacts pulled from reporting. View more in app.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.